On 18/08/2020 19:44, Fabio Perez wrote:
Hello Brian,
Thank you so much for all of that information. I think I understand a
little bit more this DNS.
If I may ask you something more:
What I want to do is to build a website (https://www.mosaic.site)
where people can open an account with us and create email and
webhosting accounts. They will be able to create websites and in the
future I want to dd more features.
For this, I bought the domain name “mosaic.site” on Namecheap.
Namecheap is already running authoritative DNS for that domain. The
authoritative servers are:
$ dig +short mosaic.site. ns
dns2.registrar-servers.com.
dns1.registrar-servers.com.
$
The setup that I'm trying to build is as follow:
VM1 - CentOS - hostname: panel.mosaic.site - IP 45.62.203.200 -
Software: DirectAdmin (Is a web hosting control panel)
VM2 - CentOS - hostname: my.mosaic.site - IP 45.62.203.201 - Software:
WHMCS (for Web Hosting control)
VM3 - CentOS - hostname: ns1.mosaic.site - IP 45.62.203.202 -
Software: PowerDNS (Authoritative – with Maria DB)
VM4 - CentOS - hostname: ns2.mosaic.site - IP 45.62.203.203 -
Software: PowerDNS (Authoritative – with Maria DB)
On all 4 VMs I set:
/etc/resolv.conf
# Generated by NetworkManager
nameserver 45.62.203.202
nameserver 45.62.203.203
Based on what you said, I can either change VM3 and VM4 to be
Recursive DNS servers and then add a VM5 as Authoritative or Just have
VM3 and VM4 as Recursive without an Authoritative server?
If you are new to DNS, I'd start with the second option: use VM3 and VM4
as recursive, and don't have an authoritative server. Any changes to
mosaic.site can be done via Namecheap's control panel.
You only need to run your own authoritative nameservers if you are
making lots of changes to mosaic.site dynamically, and even then only if
Namecheap don't provide an API for you do to this on their servers.
If you run your own authoritative nameservice then there are a bunch of
other requirements on you. The most important is that you must have
multiple authoritative nameservers on *different autonomous systems* for
resilience - read RFC 2182 for more information on this topic.
What would be your recommendation from the DNS perspective? What
configuration should I use?
What I didn’t want to do is let Namecheap control my DNS settings.
Why don't you want that? Namecheap may be cheap, but they have been
running nameservers for longer than you have.
If you don't like Namecheap then I suggest you take hosted DNS from
another provider. There are lots of options in this space. Dnsmadeeasy
is one that springs to mind and I've had good experience with; if cost
is the number one concern then Godaddy Premium DNS is very cheap. Cloud
providers like AWS have managed DNS services too, and there are other
more specialist DNS service providers that you can find easily via a
Google search.
Regards,
Brian.
_______________________________________________
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/pdns-users
